morpho-finance[.]at

PhishDestroy’s seed 230c5a has flagged the domain morpho-finance.at as an active generic phishing page masquerading as the Morpho Network Platform 2026 evaluation process. The site uses the exact title “Morpho Network Platform 2026 - Evaluation Process” to lure victims into connecting cryptocurrency wallets and surrendering funds via a cryptocurrency drainer kit. No known brand spoofing or cloned code repositories have been observed yet, but the fraudulent page is already resolving to a live IP address and serving an SSL certificate issued by Google Trust Services.

Technical indicators confirm this is a minimal-signature threat. VirusTotal shows 5/95 engines detecting the domain, the registrar is Hosting Concepts B.V. / Registrar.eu, and the page resolves to IPv4 188.114.97.3. The SSL certificate is issued by Google Trust Services, and the domain was registered through nic.at registrar ID 648. The page title and certificate remain live at the time of analysis, indicating the campaign is still active and undetected by most scanners.

As of the latest scan, morpho-finance.at remains active and under investigation. PhishDestroy recommends immediate network-level blocking of 188.114.97.3 and domain-wide blacklisting. Users should avoid visiting the site, never connect wallets, and report any transactions to local cybercrime units. Remaining risk is assessed as medium because the domain’s low detection rate and valid SSL certificate increase the likelihood of successful deception until takedown occurs.